for Cisco Catalyst 8500 Series Edge Platforms

Improvements

• Segment Routing over IPv6 Dataplane
• TrustSec and Software-Defined Access Scale Measurement
• IPv6 Unicast Support with DLEP
• Managing the SD-Routing Devices Using Cisco SD-WAN Manager
• Quantum-Safe Encryption Using Post-Quantum Preshared Keys
• Support for Automatic Log Deletion

Resolved Bugs

CSCwe82666 - Not all HSL entries get pushed to device if more than 1 HSL entries are configuredCSCwe31226 - Issues/discrepancies around CPU alarms generated and sent to deviceCSCwe43341 - TLS control-connections down, traffic from device droppedCSCwe18124 - MACsec remains marked as secured, but the traffic randomly stops workingCSCwe18276 - Route-map not getting effected when its applied in OMP for BGP routesCSCwf83850 - With Pure IPv6, minimal bootstrap unable to onboard non-fabric - IPv6 config missing in WAN int G1CSCwb74821 - Unexpected behavior due to unstable power sourceCSCwe79007 - Unexpected reload when doing ips test with UTD ips engineCSCwe81182 - (EPC, packet-trace) for IPsec running COFF (Crypto Offload)CSCwe38296 - Procyon packets drop due to MACsec post-encryption padding behaviorCSCwe93905 - NAT ALG is changing the Call-ID within SIP message header causing calls to failCSCwe85195 - AAR: BoW feature ignoring color preference from Tiered Transport preference configurationCSCwe14885 - VPN is established although the peer is using a revoked certificate for authenticationCSCwd53710 - Crash seen when name_lookup takes > 30 secCSCwe66318 - NAT entries expire on standby routerCSCwd35047 - Failed to ping gateway while configuring SharedLOM with console , te1 interface. until router reloadCSCwd84599 - Dataplane memory utilization issue - 97% QFP DRAM memory utilizationCSCwd59722 - Unexpected reboot due to IOSXE-WATCHDOG: Process = Crypto IKMPCSCwe70374 - Platform punt-policer is not configurableCSCwf05405 - Traceback seen after BDI interface is configuredCSCwe73408 - For some error condition platform_properties may double freeCSCwd42523 - Same label is assigned to different VRFsCSCwe37123 - Device uses excessive memory when configuring ACLs with large object groupsCSCwe12194 - Auto-Update cycle incorrectly deletes certificatesCSCwd90056 - C8500-12X4QC : P2MP WAN MACsec does not allow traffic to pass on the linkCSCwe09298 - C8500L sees the increase of input errors without any other specifc errors increasing under show interfaceCSCvz82148 - %CRYPTO_SL_TP_LEVELS-6-VAR_NEW_VALUE message is observed in each write config with same crypto valueCSCwe85421 - BFD session down with interface flapCSCwe95606 - Double GR_Additional log enablement defectCSCwe31471 - Segmentation fault in device when per-tunnel QoS config withdrawCSCwe89404 - No way audio when using secure hardware conference with secure endpointsCSCwd39257 - IOS-XE cpp crash when entering no ip nat create flow-entriesCSCwe63222 - Certificate output is not getting changed on renew when Cloud Certificate Authorization is AutomatedCSCwe70642 - AAR overlay actions are applied to DIA trafficCSCwa96399 - Configuring entity-information xpath filter causes syslogs to print, does not return dataCSCwe06518 - C8500-12X : ~23% degradation in IPSEC IPv6 profile for 1400BCSCwe31281 - Autotunnel Ipsec tracker:Tracker does not come up at all on deviceCSCwe39157 - During soak run, On C8500L-8S4X, Memif channel's were missing and causing SC-SN state downCSCwd93401 - AppNav-XE: Policy-map edit on cluster with multiple service context fails to program TCAMCSCwf65696 - Non-fabric- Load the minimal bootstrap configs again if device rebooted without saving the configsCSCwd76648 - Port-channel DPI Load-Balancing not utilizing all the member-linksCSCwe39011 - GARP on port up/up status from device is not received by remote peer deviceCSCwb39206 - Enable VFR CLICSCwe85022 - Device is showing 4 additional NR bands support - 1, 3, 7, and 28

Open Bugs

CSCwf70854 - Changes to speed on the interface via CLI/GUI dont go through unless first done via shell access. CSCwh06834 - Using special characters in the password while generating TP generates an invalid TP CSCwf87292 - Punt keep alive failure crash on controller managed device apparently due to data packets CSCwf94294 - Misprograming during vpn-list change under data policy. CSCwf55145 - SFP transceiver DOM not working after some time, however interface forwards the traffic as expected CSCwf94052 - BFD going down for newly onboarded device CSCwh01095 - Rapid memory leak on ngiolite process CSCwf80927 - Speed tests to internet from C8500 device triggered will fail sometimes CSCwf84522 - C8500L Unexpected rebooted while classifying packet with CTF (Common Flow Table) CSCwh00320 - Show commands in sync after removing GigabitEthernet3 CSCwf44703 - NAT64 prefix is not originated into OMP CSCwf99947 - Crash when modifying tunnel after running show crypto commands CSCwf77252 - SIP calls not working on device with ZBFW enabled CSCwf62757 - C8500L Interface data report interval issue for physical interface CSCwf96416 - Couldn't access any show commands at all. CSCwf67564 - Device observes memory leak at process SSS Manager CSCwf34171 - Configure replace command fails due to the license udi PID XXX SN:XXXX line on IOS-XE devices CSCwh00963 - Unable to migrate from ADSL to VDSL without reboot on device CSCwf69062 - SDRA-SSLVPN : The SSLVPN session closes with re-authentication error after some interval of time CSCwf79264 - In device traffic forwarded to wrong VPN hence, traffic gets wrong zonepair matched and gets dropped. CSCwf71557 - IPv4 connectivity over PPP not restored after reload CSCwf45486 - OMP to BGP redistribution leads to incorrect AS_Path Installation on chosen next-hop CSCwh01313 - Unexpected reboot due QFP UCode due to IPsec functions CSCwf95527 - BFD entries removed CSCwe26895 - Router has LocalSoftADR crash, writes flat core, and reloads CSCwh01318 - Multiple crashes observed on device platform due to memory exhaustion CSCwf71116 - Static route keep advertising via OMP even though there is no route. CSCwf60120 - Static NAT entry gets deleted from running config; but remains in startup config CSCwh00332 - B2B NAT: when configration ip nat inside/outside on VASI intereface,ack/seq number abnormal CSCwh67812 - Unable to configure crypto map on a physical interface due to which crypto map-based VPN's cannot be formed